This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft
File: gTpuT37cWLx6SLbR_XwZ39go8fE.mft (raw, json)
Hash identifier: BG1vFZhpzo4lH5+BLioA5B1FR/xeq669MthFi9rEoXc=
Subject key identifier: 94:9F:D4:9B:A8:8F:B8:EC:38:20:F4:69:1D:5B:DF:AE:D3:CD:E1:30
Authority key identifier: 81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1
Certificate issuer: /CN=A91E0CF5/serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft
Manifest number: 011B
Signing time: Sun 25 Jan 2026 04:03:12 +0000
Manifest this update: Sun 25 Jan 2026 04:03:12 +0000
Manifest next update: Sun 01 Feb 2026 04:03:12 +0000
Files and hashes: 1: gTpuT37cWLx6SLbR_XwZ39go8fE.crl (hash: dzOw0x1imk2DBUUkBdl2XLot5lkGnu1ACfBdMRO6bPU=)
2: C0F3F504492B11EF8EF0D04FC4F9AE02.roa (hash: 0zbBkZ62dr/yZQO3asP9YyQ8MW3j8nW078S8WtIQO9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl
rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CF5, serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1
Validity
Not Before: Jan 25 04:03:12 2026 GMT
Not After : Feb 1 04:03:12 2026 GMT
Subject: CN=69759600-17ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:95:0d:a8:6b:e9:f4:6e:84:ff:39:4b:be:
11:b9:1c:49:3e:3b:4f:76:53:2c:c3:4c:64:c8:58:
86:d3:46:5d:05:88:30:e3:b9:32:4c:c1:3f:5d:62:
5d:f2:6e:15:26:53:c7:9a:9c:d9:42:05:76:72:96:
da:f6:7d:c2:23:0a:c0:0e:20:ff:41:11:71:e5:f7:
69:a1:23:b2:f9:d5:70:ee:d6:d6:07:19:5d:d4:ef:
37:09:db:c4:a1:e4:ca:57:10:a3:4d:f0:3b:64:25:
a5:87:52:95:d0:f5:ef:4c:6e:a3:b3:12:d7:1c:f4:
11:55:2a:36:c0:86:fc:94:9b:45:88:b8:36:e6:c6:
66:71:c5:c0:28:08:43:2d:26:5a:8a:fb:78:40:42:
b3:17:a3:e4:d7:aa:b2:dc:b2:b0:ac:e1:dd:cd:0a:
83:32:96:57:01:f3:88:8d:a3:07:82:ca:5e:8e:10:
2a:23:af:01:65:2d:3f:b2:9d:d9:dc:5e:17:95:9a:
f2:8b:48:03:e4:1b:9a:1e:24:4c:01:a2:e5:fe:96:
01:3e:1d:0b:1b:dd:d4:d4:5e:f0:8a:96:d9:20:c1:
6a:53:57:b0:09:c4:5e:92:ec:c5:19:01:65:2a:b0:
13:3b:01:f1:29:a6:2c:1d:de:44:7d:dc:9e:90:f2:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9F:D4:9B:A8:8F:B8:EC:38:20:F4:69:1D:5B:DF:AE:D3:CD:E1:30
X509v3 Authority Key Identifier:
keyid:81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b1:0e:bd:fe:9b:2b:8b:0d:f8:e8:36:fa:35:08:55:ea:ef:
ec:49:3d:89:90:0e:94:55:f8:92:db:63:c9:76:30:e1:37:61:
1a:5d:77:7b:e9:db:bd:0b:84:61:b0:00:e6:92:9a:64:6d:86:
a4:4b:04:cf:99:fd:21:96:c5:b0:9c:84:8a:ca:8a:03:63:e7:
99:28:45:d1:6b:a8:bf:51:15:9a:0a:17:20:57:c1:bb:f1:74:
c2:eb:c4:fa:a1:7b:6f:66:52:ab:80:5f:a1:b9:0c:a9:89:f0:
fc:dc:24:2c:f8:21:ff:96:36:34:b8:7c:58:6d:ef:de:83:cc:
5c:69:ce:e5:33:88:12:b6:59:24:19:01:ec:b5:98:03:6b:8f:
17:a5:54:e6:2f:04:c4:61:fb:e8:a0:19:8d:2d:8a:07:c4:49:
b2:ba:81:c9:dd:41:7b:19:4c:78:a4:04:7b:b0:2a:5d:bc:65:
02:a1:de:0e:40:69:b5:ec:39:8d:28:63:12:2e:36:be:d6:de:
e7:8c:eb:6f:be:ba:3c:b1:fa:b6:8b:ca:31:b0:37:4a:a8:65:
18:a4:c3:24:8d:22:ed:02:38:da:2c:16:5a:63:59:6a:4a:63:
01:e5:a1:8a:ee:c3:f6:df:fd:91:3a:63:3a:2b:1c:42:2a:94:
72:c9:63:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDRjUxMTAvBgNVBAUTKDgxM0E2RTRGN0VEQzU4QkM3QTQ4QjZEMUZEN0MxOURG
RDgyOEYxRjEwHhcNMjYwMTI1MDQwMzEyWhcNMjYwMjAxMDQwMzEyWjAYMRYwFAYD
VQQDDA02OTc1OTYwMC0xN2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxVaVDahr6fRuhP85S74RuRxJPjtPdlMsw0xkyFiG00ZdBYgw47kyTME/XWJd
8m4VJlPHmpzZQgV2cpba9n3CIwrADiD/QRFx5fdpoSOy+dVw7tbWBxld1O83CdvE
oeTKVxCjTfA7ZCWlh1KV0PXvTG6jsxLXHPQRVSo2wIb8lJtFiLg25sZmccXAKAhD
LSZaivt4QEKzF6Pk16qy3LKwrOHdzQqDMpZXAfOIjaMHgspejhAqI68BZS0/sp3Z
3F4XlZryi0gD5BuaHiRMAaLl/pYBPh0LG93U1F7wipbZIMFqU1ewCcRekuzFGQFl
KrATOwHxKaYsHd5EfdyekPK0WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSf1Juo
j7jsOCD0aR1b367TzeEwMB8GA1UdIwQYMBaAFIE6bk9+3Fi8eki20f18Gd/YKPHx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS80QkI3QzY0NDQ5
MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dMeDZTTGJSX1h3WjM5Z284
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dUcHVUMzdjV0x4NlNMYlJfWHdaMzlnbzhmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MENGNS80QkI3QzY0NDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dM
eDZTTGJSX1h3WjM5Z284ZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAasQ69/psriw346Db6NQhV6u/sST2JkA6UVfiS22PJdjDhN2EaXXd7
6du9C4RhsADmkppkbYakSwTPmf0hlsWwnISKyooDY+eZKEXRa6i/URWaChcgV8G7
8XTC68T6oXtvZlKrgF+huQypifD83CQs+CH/ljY0uHxYbe/eg8xcac7lM4gStlkk
GQHstZgDa48XpVTmLwTEYfvooBmNLYoHxEmyuoHJ3UF7GUx4pAR7sCpdvGUCod4O
QGm17DmNKGMSLja+1t7njOtvvro8sfq2i8oxsDdKqGUYpMMkjSLtAjjaLBZaY1lq
SmMB5aGK7sP23/2ROmM6KxxCKpRyyWPZ
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:53:03 2026 by rpki-client